Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ev77lvzFwXQVbkBF1ZXLyLBgvYE.roa
File: Ev77lvzFwXQVbkBF1ZXLyLBgvYE.roa (raw, json)
Hash identifier: TeOl8qilveQPYxsbaDX1/YxAPYS3W0ZruombF3WSZMQ=
Subject key identifier: 12:FE:FB:96:FC:C5:C1:74:15:6E:40:45:D5:95:CB:C8:B0:60:BD:81
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018F2E17301D4E5633B9CE9A103C23DDEEEC
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ev77lvzFwXQVbkBF1ZXLyLBgvYE.roa
Signing time: Tue 30 Apr 2024 08:20:22 +0000
ROA not before: Tue 30 Apr 2024 08:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46475
IP address blocks: 77.223.214.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 08:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:17:30:1d:4e:56:33:b9:ce:9a:10:3c:23:dd:ee:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: Apr 30 08:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12fefb96fcc5c174156e4045d595cbc8b060bd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:a5:73:b9:ac:c7:3f:40:72:29:d6:16:0b:
ae:0b:c6:77:60:63:da:60:84:5a:db:2d:2d:0d:33:
76:85:0c:68:4e:9c:77:e2:34:06:64:b5:b9:be:56:
d7:52:0b:b0:f5:d5:a9:0a:be:f4:a2:ce:fc:e2:c7:
23:f7:e9:ee:61:dd:42:25:a9:d9:f7:fa:76:41:a7:
bd:ec:00:69:00:44:ec:11:5a:d5:b2:5c:80:d1:a4:
97:0a:ae:86:81:fb:05:aa:b5:59:1e:62:ef:3a:12:
31:a9:87:06:35:62:7b:a5:80:ba:74:82:10:61:24:
64:cc:80:e2:44:3d:91:3d:62:3b:ea:59:c9:28:19:
7c:ab:d5:ba:59:65:f3:ce:ac:5b:de:65:66:52:67:
22:3c:e1:e6:72:b2:5a:b1:03:d8:ca:cc:4a:db:d7:
36:fe:16:02:ea:76:06:f7:ac:70:42:79:8f:c8:d0:
fd:50:c0:03:ea:9e:ab:4f:13:a5:c5:2d:64:bb:00:
32:85:bd:82:16:ae:29:b3:50:b1:60:f9:a4:e8:3a:
47:a5:2a:99:a9:c4:46:e4:f5:1f:fb:39:c3:76:66:
ca:d0:68:68:e2:23:1c:2c:98:2f:ef:0d:2a:6d:27:
09:8b:25:c1:47:16:05:62:d1:dc:89:15:35:f6:0f:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FE:FB:96:FC:C5:C1:74:15:6E:40:45:D5:95:CB:C8:B0:60:BD:81
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ev77lvzFwXQVbkBF1ZXLyLBgvYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.214.0/23
Signature Algorithm: sha256WithRSAEncryption
94:42:32:3b:b3:a5:2e:ad:39:7a:a8:64:ca:da:2d:d6:96:31:
d1:28:e6:de:ae:2f:fc:9d:e2:e9:96:4a:36:07:35:3e:80:3d:
0d:4f:04:41:dc:77:56:09:dd:01:f5:b1:c4:9a:4d:10:66:f1:
6b:99:20:56:c2:cc:ce:41:03:50:00:ac:be:72:0e:7b:eb:94:
e5:9e:01:06:26:b0:a7:dd:67:d2:70:b6:6f:93:22:c5:08:e2:
d3:73:5c:da:02:64:77:c1:95:cb:f8:6f:6b:6e:15:b1:0b:d6:
4d:8c:41:6c:3e:7d:40:bf:d6:d4:97:6a:42:58:7e:d8:29:a2:
49:17:7c:6b:ff:6e:b6:bf:d3:90:03:f6:88:e9:98:a9:35:b5:
38:2b:60:c6:e5:86:75:db:8f:52:d6:39:30:75:88:34:fe:f2:
7a:fe:01:1b:fd:83:e0:8c:fd:06:ae:81:7f:eb:7c:33:a9:2a:
38:8b:75:c3:a8:68:13:5f:09:ca:ba:4d:6e:6c:c8:a1:1b:4d:
ef:70:7e:ed:4c:22:7e:66:52:8b:1a:0b:87:88:1c:51:cf:f4:
32:20:62:7b:87:46:74:9b:f5:48:d8:f4:06:c2:18:b5:21:4b:
5e:2c:ae:fa:8e:2c:d6:40:f5:f9:39:43:22:a1:8b:b7:40:e7:
e9:4f:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:34 2024 by rpki-client on console-fra.rpki-client.org